Yu Bao from the PayPal Cyber Security Team

CMS key-transport recipient key-size validation never runs for RFC 9709 HKDF-derived keys

MLS external commit can remove an arbitrary group member

PKIXCertPathReviewer does not apply X.509 name constraints to the target certificate

Password-based KDF cost parameters honoured unbounded from untrusted input across the remaining PBE entry points